Log in Start free

Vulnerability · Published Aug 13, 2024 · Assigned by AMD

CVE-2022-23817

High 7.3

In plain English

A high-severity improper input validation in AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics from AMD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).

Severity (CVSS 4.0)7.3High
Exploit odds (30 days)0.2%top 92.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resulting in privilege escalation.

Affected products (as reported)

VendorProductVersions
AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors see references
AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors see references
AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ 3000 Series Desktop Processors see references
AMD AMD Ryzen™ 2000 Mobile Processors see references
AMD AMD Ryzen™ 4000 Series Desktop Processors see references
AMD AMD Ryzen™ 5000 Series Desktop Processors see references
AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics see references
AMD AMD Ryzen™ Embedded R1000 Series Processors see references
AMD AMD Ryzen™ Embedded R2000 Series Processors see references
AMD AMD Ryzen™ Embedded 5000 Series Processors see references
AMD AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge") see references
AMD AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso") see references
AMD AMD Ryzen™ Embedded V2000 Series Processor see references
AMD AMD Ryzen™ Embedded V3000 Series Processors see references
AMD AMD Radeon™ RX 5000 Series Graphics Products see references
AMD AMD Radeon™ PRO W5000 Series Graphics Products see references
AMD AMD Radeon™ RX 6000 Series Graphics Products see references
AMD AMD Radeon™ PRO W6000 Series Graphics Products see references
AMD MI-25 / 50 see references
AMD MI-100 see references
AMD AMD Instinct™ MI250 see references
AMD AMD Instinct™ MI210 see references

Weakness: CWE-20, CWE-120 · Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References